#%PAM-1.0

# Load environment from /etc/environment and ~/.pam_environment
auth		required pam_env.so

# Always let the greeter start without authentication
auth		required pam_permit.so

# No action required for account management
account		required pam_permit.so

# Can't change password
password	required pam_deny.so

# Setup session
session		required pam_unix.so
{% if pkg('sys-apps/systemd') %}
session		optional pam_systemd.so
{% endif %}
{% if pkg('sys-auth/elogind') %}
session		optional pam_elogind.so
{% endif %}